Home Malware Programs Browser Hijackers CelebSauce Toolbar

CelebSauce Toolbar

Posted: April 28, 2014

Threat Metric

Threat Level: 5/10
Infected PCs: 4,986
First Seen: April 28, 2014
Last Seen: August 18, 2022
OS(es) Affected: Windows


CelebSauce Toolbar is a potentially unwanted browser extension/bad toolbar, which may modify the default system parameters when it inserts itself into a PC. CelebSauce Toolbar may repeatedly divert the Web browser to suspicious websites, show non-stop pop-up advertisements and messages. CelebSauce Toolbar may also lead to similar irritating activities that may enable its makers to benefit from raised web traffic and clicks on advertisements. CelebSauce Toolbar may substitute the default start page and search service or a new tab window with an affiliated website. CelebSauce Toolbar may be distributed and access the PC as an optional program and add itself into all Web browsers that are installed on the PC. CelebSauce Toolbar may be marketed and add itself as an extra application into the computer system through packaged free program downloads.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\CelebSauce\bar\1.bin\kabar.dll File name: kabar.dll
Size: 675.84 KB (675840 bytes)
MD5: ee0d816a009c93629285e4f3db32e69e
Detection count: 1,052
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\CelebSauce\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES(x86)%\CelebSauce\bar\2.bin\kamedint.exe File name: kamedint.exe
Size: 28.67 KB (28672 bytes)
MD5: 4012c5d71c48c1f0b834a9cac99b6046
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CelebSauce\bar\2.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\CelebSauce\bar\2.bin\kaSrcAs.dll File name: kaSrcAs.dll
Size: 60.41 KB (60416 bytes)
MD5: f17d8db5a0dfe68af114d55959d750e8
Detection count: 41
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\CelebSauce\bar\2.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES(x86)%\CelebSauce\bar\2.bin\kabarsvc.exe File name: kabarsvc.exe
Size: 36.86 KB (36864 bytes)
MD5: 3514024333ecc8610966001d0bba05f1
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CelebSauce\bar\2.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES(x86)%\CelebSauce\bar\2.bin\kabrmon.exe File name: kabrmon.exe
Size: 27.64 KB (27648 bytes)
MD5: 3d0a41f7cd1b004004a1df8c19282c03
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CelebSauce\bar\2.bin
Group: Malware file
Last Updated: December 16, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{1558273E-0E2B-49C8-B7BD-24B26E5E4262}Software\Microsoft\Internet Explorer\Approved Extensions\{E8C699E4-65A3-432C-91BF-9990864D1681}Software\Microsoft\Internet Explorer\Approved Extensions\{F7FABDD9-C7D2-4260-AC5B-0016C906EEAD}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{1558273e-0e2b-49c8-b7bd-24b26e5e4262}Software\Microsoft\Internet Explorer\URLSearchHooks\{2083a5f7-39dd-410a-95db-0afc2dcc29f4}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{1558273e-0e2b-49c8-b7bd-24b26e5e4262}

Additional Information

The following directories were created:
%LocalAppData%\Google\Chrome\User Data\Default\Extensions\jgimlomdjnmflmompaakiecfhfccbjgm
Loading...